diff --git a/upup/models/cloudup/resources/addons/openstack.addons.k8s.io/k8s-1.13.yaml.template b/upup/models/cloudup/resources/addons/openstack.addons.k8s.io/k8s-1.13.yaml.template
index f93583daf6351..498bda7da9476 100644
--- a/upup/models/cloudup/resources/addons/openstack.addons.k8s.io/k8s-1.13.yaml.template
+++ b/upup/models/cloudup/resources/addons/openstack.addons.k8s.io/k8s-1.13.yaml.template
@@ -48,6 +48,14 @@ metadata:
     k8s-app: openstack-cloud-provider
     k8s-addon: openstack.addons.k8s.io
 rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - create
+  - update
 - apiGroups:
   - ""
   resources:
@@ -115,6 +123,7 @@ rules:
   verbs:
   - list
   - get
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
diff --git a/upup/pkg/fi/cloudup/tests/manifests/k8s-1.13.yaml b/upup/pkg/fi/cloudup/tests/manifests/k8s-1.13.yaml
index 9d207a090d9e8..1b77be4c3bbed 100644
--- a/upup/pkg/fi/cloudup/tests/manifests/k8s-1.13.yaml
+++ b/upup/pkg/fi/cloudup/tests/manifests/k8s-1.13.yaml
@@ -48,6 +48,14 @@ metadata:
     k8s-app: openstack-cloud-provider
     k8s-addon: openstack.addons.k8s.io
 rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - create
+  - update
 - apiGroups:
   - ""
   resources:
@@ -115,6 +123,7 @@ rules:
   verbs:
   - list
   - get
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole